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REMARKS 

Reconsideration and allowance of the subject patent application are respectfully 
requested. 

Claims 1-9, 11-13 and 15-21 were rejected under 35 U.S.C. Section 102(e) as allegedly 
being "anticipated" by Lai On (U.S. Patent Publication No. 2002/0059531). While not 
acquiescing in this rejection, claims 1, 4 and 8 have been amended. The discussion below makes 
reference to the amended claims. 

Claims 1, 4, 8 and 16 have each been amended to describe that the same first key 
information can be used repeatedly to generate new second key information. These amendments 
are believed to place the application in condition for allowance and thus their entry is believed to 
be appropriate and is respectfully requested. As described by way of example and without 
limitation in the subject patent application, after the expiration of a specified period of time given 
to a user to access data in a server system, the same first key information (e.g., access key) which 
was previously obtained can be used to generate new second key information (e.g., session key). 
Consequently, in the non-limiting example embodiments, for plural times of access to the data in 
the server, user-identifying information is transmitted only once to the server (e.g., in the case of 
a communication navigation, when the power is turned "on"), thereby reducing the possibility of 
revealing a user's private information. Additionally, in the server, generating a session key is 
simpler than generating an access key, and thus the computation load of the server can be 
reduced as well. 

No such arrangement is disclosed in Lai On and thus Lai On cannot anticipate claims 1, 
4, 8 and 16 or any claims that depend therefrom. Specifically, Lai On does not disclose a system 
in which the same first key information can be used repeatedly to generate new second key 
information. Paragraphs [0008]-[0010] and [0020]-[0022] of Lai On describe that a user session 
key and a second site key are generated by an authentication site in response to certain 
identification information which is transmitted to a first computer (site) and that the user session 
key can then be transmitted to a second computer (site) whereupon the authentication site 
transmits the second site's site key to the user. The user can use the second site's site key to 
verify the correctness of the second site. Thus, while Lai On discloses sending the second site's 
site key in response to receiving a user session key, there is no disclosure in Lai On that the 
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second site's site key changes every time the user session key is received. Indeed, such changing 
seems to be inconsistent with the concept of verifying the correctness of second site called for by 
the Lai On methodology. 

Moreover, the dependent claims contain additional features not shown in Lai On and 
these provide further independent bases for patentability. For example, claims 19 and 20 each 
call for "at least one other different user terminal " (emphasis added). No such terminal is 
disclosed in Lai On and these claims cannot therefore be anticipated by Lai On. In particular, the 
portions of the Lai On referenced in the office action in connection with claims 19 and 20 relate 
to a single user terminal accessing multiple sites, not multiple user terminals. 

The pending claims are believed to be allowable and favorable office action is 
respectfully requested. 
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